@alfe.ai/agent-api-client 0.1.3 → 0.1.4

package/dist/index.cjs

@@ -116,41 +116,91 @@ var AgentApiClient = class {
 	async getRegistry() {
 		return this.request("/integrations/registry");
 	}
+	/**
+	* Returns every connected Google account for the agent. Multi-account by
+	* design — the openclaw-google plugin requires the LLM to pass `email`
+	* explicitly to `google_run_command` so an account is always selected
+	* deliberately.
+	*
+	* 2026-05-14 (connections-redesign PR 1): the legacy flat shape (`email`,
+	* `refreshToken`, `accessToken`, etc., populated from the default account)
+	* is gone. Iterate over `accounts`.
+	*/
 	async getGoogleCredentials() {
-		return this.request("/agent/google/credentials");
+		return { accounts: (await this.request("/agent/connect/google/accounts")).accounts.map((a) => ({
+			email: a.accountIdentifier,
+			refreshToken: a.refreshToken ?? "",
+			clientId: a.clientId ?? "",
+			clientSecret: a.clientSecret ?? "",
+			displayName: a.displayName ?? void 0,
+			connectedAt: a.connectedAt
+		})) };
 	}
 	async disconnectGoogleAccount(email) {
-		return this.request(`/agent/google/accounts/${encodeURIComponent(email)}`, { method: "DELETE" });
-	}
-	async setDefaultGoogleAccount(email) {
-		return this.request(`/agent/google/accounts/${encodeURIComponent(email)}/default`, { method: "PUT" });
+		return { accounts: (await this.request(`/agent/connect/google/accounts/${encodeURIComponent(email)}`, { method: "DELETE" })).accounts.map((a) => ({
+			email: a.accountIdentifier,
+			displayName: a.displayName ?? void 0,
+			connectedAt: a.connectedAt
+		})) };
 	}
 	async getGoogleChatCredentials() {
 		return this.request("/agent/google-chat/credentials");
 	}
 	async getGithubCredentials() {
-		return this.request("/agent/github/credentials");
+		const raw = await this.request("/agent/connect/github/credentials");
+		return {
+			login: raw.login,
+			accessToken: raw.accessToken
+		};
 	}
 	async getXeroCredentials() {
-		return this.request("/agent/xero/credentials");
+		const raw = await this.request("/agent/connect/xero/credentials");
+		return {
+			accessToken: raw.accessToken,
+			accessTokenExpiresAt: raw.accessTokenExpiresAt ?? "",
+			xeroTenantId: raw.xeroTenantId ?? ""
+		};
 	}
 	async refreshXeroToken() {
-		return this.request("/agent/xero/token", { method: "POST" });
+		return this.request("/agent/connect/xero/refresh", { method: "POST" });
 	}
 	async getNotionCredentials() {
-		return this.request("/agent/notion/credentials");
+		const raw = await this.request("/agent/connect/notion/credentials");
+		return {
+			accessToken: raw.accessToken,
+			workspaceId: raw.workspaceId ?? "",
+			workspaceName: raw.workspaceName ?? ""
+		};
 	}
 	async getAtlassianCredentials() {
-		return this.request("/agent/atlassian/credentials");
+		const raw = await this.request("/agent/connect/atlassian/credentials");
+		return {
+			accessToken: raw.accessToken,
+			refreshToken: "",
+			accessTokenExpiresAt: raw.accessTokenExpiresAt ?? "",
+			cloudId: raw.cloudId ?? "",
+			siteName: raw.siteName ?? "",
+			siteUrl: raw.siteUrl ?? "",
+			email: "",
+			enabledProducts: [],
+			clientId: raw.clientId,
+			clientSecret: raw.clientSecret
+		};
 	}
 	async refreshAtlassianToken() {
-		return this.request("/agent/atlassian/token", { method: "POST" });
+		return this.request("/agent/connect/atlassian/refresh", { method: "POST" });
 	}
 	async getMYOBCredentials() {
-		return this.request("/agent/myob/credentials");
+		const raw = await this.request("/agent/connect/myob/credentials");
+		return {
+			accessToken: raw.accessToken,
+			accessTokenExpiresAt: raw.accessTokenExpiresAt ?? "",
+			myobBusinessId: raw.myobBusinessId,
+			clientId: raw.clientId
+		};
 	}
 	async refreshMYOBToken() {
-		return this.request("/agent/myob/token", { method: "POST" });
+		return this.request("/agent/connect/myob/refresh", { method: "POST" });
 	}
 	async getTeamsCredentials() {
 		return this.request("/agent/microsoft/credentials");

package/dist/index.d.cts

@@ -1,262 +1,7 @@
-//#region ../../packages-internal/types/dist/access.d.ts
+import { ChangelogAction, ChangelogActor, ChangelogEntry, ChangelogEntry as ChangelogEntry$1, EncryptedEnvelopeV1, EncryptedEnvelopeV1 as EncryptedEnvelopeV1$1, Field, FieldEnvelope, FieldEnvelope as FieldEnvelope$1, FieldFormat, FieldFormat as FieldFormat$1, FieldSensitivity, FieldSensitivity as FieldSensitivity$1, FieldView, GeneratedDataKey, GeneratedDataKey as GeneratedDataKey$1, IntegrationConfigResult, IntegrationConfigResult as IntegrationConfigResult$1, IntegrationConfigSchemaField, IntegrationInstall, IntegrationInstall as IntegrationInstall$1, RegistryEntry, RegistryEntry as RegistryEntry$1, ScopeInfo, ScopeInfo as ScopeInfo$1, SecretAggregate, SecretAggregate as SecretAggregate$1, SecretCategory, SecretCategory as SecretCategory$1, SecretMetadata, SecretMetadata as SecretMetadata$1, SecretScope, SecretScope as SecretScope$1 } from "@alfe/types";
 
-/**
- * The four resource scopes at which a permission can apply.
- * Order is meaningful: broader scopes first (`org`) → narrower last (`agent`).
- *
- * `IntegrationScope` in integration.ts and `SecretScope` in secrets.ts are
- * intentional aliases of this same enum — there is only one concept of
- * "scope" in Alfe.
- */
-declare const ResourceScope: {
-  readonly Org: "org";
-  readonly Team: "team";
-  readonly Project: "project";
-  readonly Agent: "agent";
-};
-type ResourceScope = (typeof ResourceScope)[keyof typeof ResourceScope];
-/** Ordered tuple of resource scope string values (broad → narrow). */
-//#endregion
-//#region ../../packages-internal/types/dist/integration.d.ts
-/** Controls where an integration appears: public (everyone), hidden (nowhere) */
-declare const IntegrationVisibility: {
-  readonly Public: "public";
-  readonly Hidden: "hidden";
-};
-type IntegrationVisibility = (typeof IntegrationVisibility)[keyof typeof IntegrationVisibility];
-/** Scope at which an integration is installed */
-declare const IntegrationScope: {
-  readonly Org: "org";
-  readonly Team: "team";
-  readonly Project: "project";
-  readonly Agent: "agent";
-};
-type IntegrationScope = ResourceScope;
-declare const IntegrationDesiredStatus: {
-  readonly Active: "active";
-  readonly Removed: "removed";
-};
-type IntegrationDesiredStatus = (typeof IntegrationDesiredStatus)[keyof typeof IntegrationDesiredStatus];
-declare const IntegrationActualStatus: {
-  readonly Installing: "installing";
-  readonly Active: "active";
-  readonly Error: "error";
-  readonly Removing: "removing";
-  readonly Inactive: "inactive";
-  readonly Unknown: "unknown";
-};
-type IntegrationActualStatus = (typeof IntegrationActualStatus)[keyof typeof IntegrationActualStatus];
-interface IntegrationInstall {
-  scope: IntegrationScope;
-  scopeId: string;
-  integrationId: string;
-  tenantId: string;
-  desiredStatus: IntegrationDesiredStatus;
-  actualStatus: IntegrationActualStatus;
-  version: string;
-  config: Record<string, unknown>;
-  errorMessage: string;
-  installedAt: string;
-  updatedAt: string;
-}
-/** @deprecated Use IntegrationInstall instead */
-
-interface IntegrationConfigSchemaField {
-  key: string;
-  label: string;
-  type: string;
-  description?: string;
-  required?: boolean;
-  default?: string | number | boolean;
-  options?: string[];
-  select_options?: {
-    value: string;
-    label: string;
-  }[];
-  oauth_provider?: string;
-  oauth_scopes?: string[];
-  oauth_integration_id?: string;
-  editable?: string;
-  hidden?: boolean;
-}
-interface IntegrationConfigResult {
-  integrationId: string;
-  config: Record<string, unknown>;
-  configSchema: IntegrationConfigSchemaField[];
-}
-interface RegistryEntry {
-  id: string;
-  name: string;
-  description: string;
-  versions: string[];
-  latest: string;
-  repository: string;
-  commit: string;
-  icon?: string;
-  author?: {
-    name: string;
-    url?: string;
-  } | string;
-  pricing?: {
-    type: "free" | "paid" | "usage";
-    price?: number;
-    currency?: string;
-    interval?: "month" | "year";
-    description?: string;
-  };
-  features?: string[];
-  preview_images?: string[];
-  config_schema?: IntegrationConfigSchemaField[];
-  supported_agents?: string[];
-  /** Scopes where this integration can be installed */
-  supported_scopes?: IntegrationScope[];
-  /** Visibility status — controls where integration appears */
-  visibility?: IntegrationVisibility;
-}
-//# sourceMappingURL=integration.d.ts.map
-//#endregion
-//#region ../../packages-internal/types/dist/secrets.d.ts
-/** Scope levels at which a secret can be owned. Aliased to ResourceScope. */
-type SecretScope = ResourceScope;
-/**
- * v1 encrypted envelope as persisted by services/secrets and exchanged with
- * agents. Values are AES-256-GCM ciphertext; iv/authTag/ciphertext/dataKeyCiphertext
- * are all base64-encoded.
- */
-interface EncryptedEnvelopeV1 {
-  version: 1;
-  iv: string;
-  ciphertext: string;
-  authTag: string;
-  dataKeyCiphertext: string;
-}
-/**
- * Display/validation hint for a field's value. `"json"` signals that the
- * string is a JSON-stringified payload that consumers should `JSON.parse`.
- */
-declare const FIELD_FORMATS: readonly ["text", "email", "url", "phone", "date", "number", "json"];
-type FieldFormat = (typeof FIELD_FORMATS)[number];
-/**
- * Whether a field is stored in plaintext (visible to anyone with read access)
- * or encrypted (requires KMS + the right encryption context to read).
- */
-declare const FIELD_SENSITIVITIES: readonly ["plaintext", "encrypted"];
-type FieldSensitivity = (typeof FIELD_SENSITIVITIES)[number];
-/**
- * A field on a secret. `value` is always a string at the wire; for encrypted
- * fields it's the plaintext at the API edge (the service encrypts before
- * persistence). Reads from the dashboard omit `value` for encrypted fields;
- * agents get a `FieldEnvelope` instead and decrypt locally.
- */
-interface Field {
-  key: string;
-  format?: FieldFormat;
-  sensitivity: FieldSensitivity;
-  value: string;
-}
-/**
- * Secret category — drives icon/template/filter behaviour. Defaults to
- * `"other"` for migrated rows.
- */
-declare const SECRET_CATEGORIES: readonly ["login", "api_key", "database", "ssh_key", "certificate", "secure_note", "credit_card", "identity", "wifi", "other"];
-type SecretCategory = (typeof SECRET_CATEGORIES)[number];
-/**
- * One field as exposed to readers. Encrypted fields have no `value` on the
- * dashboard read path; the agent-side aggregate carries `envelope` instead.
- */
-interface FieldView {
-  key: string;
-  format?: FieldFormat;
-  sensitivity: FieldSensitivity;
-  /** Present for `sensitivity: "plaintext"` only. */
-  value?: string;
-  /** Present for `sensitivity: "encrypted"` on agent-side reads only. */
-  envelope?: EncryptedEnvelopeV1;
-  /** Plaintext fields that opt into `format: "json"` are pre-parsed for callers. */
-  parsedValue?: unknown;
-  rotatedAt?: string;
-  createdAt: string;
-  updatedAt: string;
-}
-/** A secret as assembled from its multi-row aggregate. */
-interface SecretAggregate {
-  secretId: string;
-  secretName: string;
-  description?: string;
-  tags: string[];
-  category: SecretCategory;
-  fields: FieldView[];
-  changelogVersion: number;
-  createdAt: string;
-  updatedAt: string;
-}
-/** Metadata-only projection — used by list endpoints. */
-interface SecretMetadata {
-  secretId: string;
-  secretName: string;
-  description?: string;
-  tags: string[];
-  category: SecretCategory;
-  fieldKeys: string[];
-  changelogVersion: number;
-  createdAt: string;
-  updatedAt: string;
-}
-/**
- * Per-field encrypted envelope returned to agents on the agent-side aggregate.
- * Agents decrypt locally using a data key fetched from `/decrypt-data-key`.
- */
-interface FieldEnvelope {
-  key: string;
-  format?: FieldFormat;
-  envelope: EncryptedEnvelopeV1;
-  rotatedAt?: string;
-  createdAt: string;
-  updatedAt: string;
-}
-/** A scope the caller can read or write secrets in. */
-interface ScopeInfo {
-  scope: SecretScope;
-  scopeId: string;
-  name?: string;
-}
-/**
- * KMS-issued data key, returned by the secrets service's
- * `/secrets/generate-data-key` KMS proxy endpoint. The plaintext key is
- * returned base64-encoded; callers MUST decode it to a Buffer and zero the
- * Buffer after use — never keep the plaintext as a JS string.
- */
-interface GeneratedDataKey {
-  plaintextKey: string;
-  dataKeyCiphertext: string;
-}
-/**
- * Action types recorded in the secret changelog. Append-only.
- */
-declare const CHANGELOG_ACTIONS: readonly ["created", "deleted", "metadata_updated", "field_added", "field_rotated", "field_removed", "tag_added", "tag_removed"];
-type ChangelogAction = (typeof CHANGELOG_ACTIONS)[number];
-/** Who triggered a changelog entry. */
-interface ChangelogActor {
-  kind: "user" | "agent" | "system";
-  id: string;
-}
-/**
- * One audit row from the secret's changelog. Metadata only — never carries
- * field VALUES (old or new). Rolling back a rotated secret is intentionally
- * not supported.
- */
-interface ChangelogEntry {
-  changelogVersion: number;
-  action: ChangelogAction;
-  fieldKey?: string;
-  fieldSensitivity?: FieldSensitivity;
-  changedBy: ChangelogActor;
-  reason?: string;
-  timestamp: string;
-}
-//# sourceMappingURL=secrets.d.ts.map
-//#endregion
 //#region src/index.d.ts
+
 interface AgentApiClientConfig {
   apiKey: string;
   apiUrl: string;
@@ -402,14 +147,14 @@ declare class AgentApiClient {
     downloadUrl: string;
     expiresIn: number;
   }>;
-  listIntegrations(): Promise<IntegrationInstall[]>;
-  getIntegrationConfig(integrationId: string): Promise<IntegrationConfigResult>;
+  listIntegrations(): Promise<IntegrationInstall$1[]>;
+  getIntegrationConfig(integrationId: string): Promise<IntegrationConfigResult$1>;
   updateIntegrationConfig(integrationId: string, config: Record<string, unknown>): Promise<void>;
   installIntegration(integrationId: string, options?: {
     version?: string;
     config?: Record<string, unknown>;
-  }): Promise<IntegrationInstall>;
-  removeIntegration(integrationId: string): Promise<IntegrationInstall>;
+  }): Promise<IntegrationInstall$1>;
+  removeIntegration(integrationId: string): Promise<IntegrationInstall$1>;
   getOAuthUrl(provider: string, scopes?: string[]): Promise<{
     url: string;
     provider: string;
@@ -421,37 +166,33 @@ declare class AgentApiClient {
     config?: Record<string, string>;
   }>;
   getRegistry(): Promise<{
-    integrations: RegistryEntry[];
+    integrations: RegistryEntry$1[];
   }>;
+  /**
+   * Returns every connected Google account for the agent. Multi-account by
+   * design — the openclaw-google plugin requires the LLM to pass `email`
+   * explicitly to `google_run_command` so an account is always selected
+   * deliberately.
+   *
+   * 2026-05-14 (connections-redesign PR 1): the legacy flat shape (`email`,
+   * `refreshToken`, `accessToken`, etc., populated from the default account)
+   * is gone. Iterate over `accounts`.
+   */
   getGoogleCredentials(): Promise<{
-    accounts?: {
+    accounts: {
       email: string;
       refreshToken: string;
       clientId: string;
       clientSecret: string;
-      enabledServices?: string[];
-      isDefault: boolean;
       displayName?: string;
+      connectedAt?: string;
     }[];
-    email: string;
-    refreshToken: string;
-    clientId: string;
-    clientSecret: string;
-    projectId: string;
-    enabledServices?: string[];
   }>;
   disconnectGoogleAccount(email: string): Promise<{
     accounts: {
       email: string;
       displayName?: string;
-      isDefault: boolean;
-    }[];
-  }>;
-  setDefaultGoogleAccount(email: string): Promise<{
-    accounts: {
-      email: string;
-      displayName?: string;
-      isDefault: boolean;
+      connectedAt?: string;
     }[];
   }>;
   getGoogleChatCredentials(): Promise<{
@@ -559,11 +300,11 @@ declare class AgentApiClient {
    * to reach them.
    */
   generateSecretDataKey(args: {
-    scope: SecretScope;
+    scope: SecretScope$1;
     scopeId: string;
     secretId: string;
     fieldKey: string;
-  }): Promise<GeneratedDataKey>;
+  }): Promise<GeneratedDataKey$1>;
   /**
    * Unwrap a wrapped data key so the agent can decrypt the envelope locally.
    * `fieldKey` MUST match the value supplied when the data key was generated
@@ -571,7 +312,7 @@ declare class AgentApiClient {
    * `InvalidCiphertextException`.
    */
   decryptSecretDataKey(args: {
-    scope: SecretScope;
+    scope: SecretScope$1;
     scopeId: string;
     secretId: string;
     fieldKey: string;
@@ -586,57 +327,57 @@ declare class AgentApiClient {
    * Plaintext fields ship the value inline.
    */
   createSecret(args: {
-    scope: SecretScope;
+    scope: SecretScope$1;
     scopeId: string;
     secretId: string;
     secretName: string;
-    category?: SecretCategory;
+    category?: SecretCategory$1;
     description?: string;
     tags?: string[];
     fields: {
       key: string;
-      format?: FieldFormat;
-      sensitivity: FieldSensitivity;
+      format?: FieldFormat$1;
+      sensitivity: FieldSensitivity$1;
       value?: string;
-      envelope?: EncryptedEnvelopeV1;
+      envelope?: EncryptedEnvelopeV1$1;
     }[];
     reason?: string;
-  }): Promise<SecretAggregate>;
+  }): Promise<SecretAggregate$1>;
   /** Fetch the secret aggregate plus per-field encrypted envelopes. */
   getSecret(args: {
-    scope: SecretScope;
+    scope: SecretScope$1;
     scopeId: string;
     secretId: string;
   }): Promise<{
-    aggregate: SecretAggregate;
-    envelopes: FieldEnvelope[];
+    aggregate: SecretAggregate$1;
+    envelopes: FieldEnvelope$1[];
   }>;
   /** Fetch one field. Plaintext: value inline. Encrypted: envelope. */
   getSecretField(args: {
-    scope: SecretScope;
+    scope: SecretScope$1;
     scopeId: string;
     secretId: string;
     fieldKey: string;
   }): Promise<{
     key: string;
-    sensitivity: FieldSensitivity;
-    format?: FieldFormat;
+    sensitivity: FieldSensitivity$1;
+    format?: FieldFormat$1;
     value?: string;
-    envelope?: EncryptedEnvelopeV1;
+    envelope?: EncryptedEnvelopeV1$1;
     rotatedAt?: string;
     createdAt: string;
     updatedAt: string;
   }>;
   /** Add OR rotate one field. */
   setSecretField(args: {
-    scope: SecretScope;
+    scope: SecretScope$1;
     scopeId: string;
     secretId: string;
     fieldKey: string;
-    sensitivity: FieldSensitivity;
-    format?: FieldFormat;
+    sensitivity: FieldSensitivity$1;
+    format?: FieldFormat$1;
     value?: string;
-    envelope?: EncryptedEnvelopeV1;
+    envelope?: EncryptedEnvelopeV1$1;
     reason?: string;
   }): Promise<{
     fieldKey: string;
@@ -644,49 +385,49 @@ declare class AgentApiClient {
   }>;
   /** Remove one field. */
   removeSecretField(args: {
-    scope: SecretScope;
+    scope: SecretScope$1;
     scopeId: string;
     secretId: string;
     fieldKey: string;
   }): Promise<void>;
   /** Update secret-level metadata (name/description/tags/category). */
   updateSecretMetadata(args: {
-    scope: SecretScope;
+    scope: SecretScope$1;
     scopeId: string;
     secretId: string;
     secretName?: string;
     description?: string;
     tags?: string[];
-    category?: SecretCategory;
+    category?: SecretCategory$1;
     reason?: string;
-  }): Promise<SecretAggregate>;
+  }): Promise<SecretAggregate$1>;
   /** List metadata for secrets in a scope. Optional filters route through the byFacet GSI. */
   listSecrets(args: {
-    scope: SecretScope;
+    scope: SecretScope$1;
     scopeId: string;
-    category?: SecretCategory;
+    category?: SecretCategory$1;
     tag?: string;
     fieldKey?: string;
-  }): Promise<SecretMetadata[]>;
+  }): Promise<SecretMetadata$1[]>;
   /** Bounded changelog read — metadata-only audit entries. */
   getSecretHistory(args: {
-    scope: SecretScope;
+    scope: SecretScope$1;
     scopeId: string;
     secretId: string;
     limit?: number;
     cursor?: string;
   }): Promise<{
-    entries: ChangelogEntry[];
+    entries: ChangelogEntry$1[];
     nextCursor?: string;
   }>;
   /** Delete a secret (and all its field rows + tag rows + changelog rows). */
   deleteSecret(args: {
-    scope: SecretScope;
+    scope: SecretScope$1;
     scopeId: string;
     secretId: string;
   }): Promise<void>;
   /** Enumerate scopes (org/team/project/agent) this agent can access. */
-  listSecretScopes(): Promise<ScopeInfo[]>;
+  listSecretScopes(): Promise<ScopeInfo$1[]>;
   /**
    * Returns the calling agent's own identity context — `{ agentId, tenantId }`
    * decoded server-side from the agent API token. Used by the

package/dist/index.d.cts.map

@@ -1 +1 @@
-{"version":3,"file":"index.d.cts","names":["PERMISSION_CATALOG","Record","TENANT_ALLOWED_SUBJECTS","TenantAllowedSubject","ResourceScope","RESOURCE_SCOPES","AccessLevel","ScopedAccess","AllScopedAccess","ResourceScope","DEFAULT_INTEGRATIONS","IntegrationVisibility","INTEGRATION_VISIBILITIES","IntegrationScope","INTEGRATION_SCOPES","IntegrationDesiredStatus","INTEGRATION_DESIRED_STATUSES","IntegrationActualStatus","INTEGRATION_ACTUAL_STATUSES","IntegrationInstall","Record","AgentIntegration","OrgIntegration","IntegrationConfigSchemaField","IntegrationConfigResult","RegistryEntry","ResourceScope","SecretScope","SECRET_SCOPES","EncryptedEnvelopeV1","FIELD_FORMATS","FieldFormat","FIELD_SENSITIVITIES","FieldSensitivity","Field","SECRET_CATEGORIES","SecretCategory","FieldView","SecretAggregate","SecretMetadata","FieldEnvelope","ScopeInfo","GeneratedDataKey","CHANGELOG_ACTIONS","ChangelogAction","ChangelogActor","ChangelogEntry"],"sources":["../../../packages-internal/types/dist/access.d.ts","../../../packages-internal/types/dist/integration.d.ts","../../../packages-internal/types/dist/secrets.d.ts","../src/index.ts"],"sourcesContent":["/**\n * Runtime catalog of declared permission subjects + allowed actions.\n *\n * Mirrors the compile-time `PermissionDefinitions` augmentation in\n * `@alfe/api-core/auriclabs-roles.ts`. Kept here so browser code\n * (dashboard) can consume it without pulling in server-only deps\n * (`@middy/core`, `aws-lambda`, etc.).\n */\nexport declare const PERMISSION_CATALOG: Record<string, readonly string[]>;\n/**\n * Subjects a tenant may grant via a custom role.\n *\n * Excludes `all` (platform-admin escape hatch) and `admin_*` subjects.\n */\nexport declare const TENANT_ALLOWED_SUBJECTS: readonly [\"agent\", \"sync\", \"integration\", \"secret\", \"database\", \"template\", \"org_file\", \"team\", \"project\", \"model_policy\", \"role_management\", \"billing\", \"identity\", \"token\", \"user\", \"gateway\", \"voice\"];\nexport type TenantAllowedSubject = (typeof TENANT_ALLOWED_SUBJECTS)[number];\n/**\n * The four resource scopes at which a permission can apply.\n * Order is meaningful: broader scopes first (`org`) → narrower last (`agent`).\n *\n * `IntegrationScope` in integration.ts and `SecretScope` in secrets.ts are\n * intentional aliases of this same enum — there is only one concept of\n * \"scope\" in Alfe.\n */\nexport declare const ResourceScope: {\n    readonly Org: \"org\";\n    readonly Team: \"team\";\n    readonly Project: \"project\";\n    readonly Agent: \"agent\";\n};\nexport type ResourceScope = (typeof ResourceScope)[keyof typeof ResourceScope];\n/** Ordered tuple of resource scope string values (broad → narrow). */\nexport declare const RESOURCE_SCOPES: readonly [\"agent\" | \"team\" | \"project\" | \"org\", ...(\"agent\" | \"team\" | \"project\" | \"org\")[]];\nexport declare const AccessLevel: {\n    readonly None: \"none\";\n    readonly Read: \"read\";\n    readonly Write: \"write\";\n    readonly Manage: \"manage\";\n};\nexport type AccessLevel = (typeof AccessLevel)[keyof typeof AccessLevel];\nexport interface ScopedAccess {\n    scope: ResourceScope;\n    scopeId: string;\n    accessLevel: AccessLevel;\n    /** Resolved role label (e.g. \"org_admin\", \"team_member\") */\n    role: string;\n}\nexport interface AllScopedAccess {\n    orgAccess: ScopedAccess;\n    teamAccess: ScopedAccess[];\n    projectAccess: ScopedAccess[];\n}\n//# sourceMappingURL=access.d.ts.map","import { ResourceScope } from \"./access.js\";\n/** Integrations auto-installed for ALL agents regardless of hosting type. Cannot be removed. */\nexport declare const DEFAULT_INTEGRATIONS: readonly string[];\n/** Controls where an integration appears: public (everyone), hidden (nowhere) */\nexport declare const IntegrationVisibility: {\n    readonly Public: \"public\";\n    readonly Hidden: \"hidden\";\n};\nexport type IntegrationVisibility = (typeof IntegrationVisibility)[keyof typeof IntegrationVisibility];\nexport declare const INTEGRATION_VISIBILITIES: readonly [\"public\" | \"hidden\", ...(\"public\" | \"hidden\")[]];\n/** Scope at which an integration is installed */\nexport declare const IntegrationScope: {\n    readonly Org: \"org\";\n    readonly Team: \"team\";\n    readonly Project: \"project\";\n    readonly Agent: \"agent\";\n};\nexport type IntegrationScope = ResourceScope;\nexport declare const INTEGRATION_SCOPES: readonly [\"agent\" | \"team\" | \"project\" | \"org\", ...(\"agent\" | \"team\" | \"project\" | \"org\")[]];\nexport declare const IntegrationDesiredStatus: {\n    readonly Active: \"active\";\n    readonly Removed: \"removed\";\n};\nexport type IntegrationDesiredStatus = (typeof IntegrationDesiredStatus)[keyof typeof IntegrationDesiredStatus];\nexport declare const INTEGRATION_DESIRED_STATUSES: readonly [\"active\" | \"removed\", ...(\"active\" | \"removed\")[]];\nexport declare const IntegrationActualStatus: {\n    readonly Installing: \"installing\";\n    readonly Active: \"active\";\n    readonly Error: \"error\";\n    readonly Removing: \"removing\";\n    readonly Inactive: \"inactive\";\n    readonly Unknown: \"unknown\";\n};\nexport type IntegrationActualStatus = (typeof IntegrationActualStatus)[keyof typeof IntegrationActualStatus];\nexport declare const INTEGRATION_ACTUAL_STATUSES: readonly [\"active\" | \"error\" | \"installing\" | \"removing\" | \"inactive\" | \"unknown\", ...(\"active\" | \"error\" | \"installing\" | \"removing\" | \"inactive\" | \"unknown\")[]];\nexport interface IntegrationInstall {\n    scope: IntegrationScope;\n    scopeId: string;\n    integrationId: string;\n    tenantId: string;\n    desiredStatus: IntegrationDesiredStatus;\n    actualStatus: IntegrationActualStatus;\n    version: string;\n    config: Record<string, unknown>;\n    errorMessage: string;\n    installedAt: string;\n    updatedAt: string;\n}\n/** @deprecated Use IntegrationInstall instead */\nexport type AgentIntegration = IntegrationInstall;\n/** Org-scoped integration install */\nexport type OrgIntegration = IntegrationInstall;\nexport interface IntegrationConfigSchemaField {\n    key: string;\n    label: string;\n    type: string;\n    description?: string;\n    required?: boolean;\n    default?: string | number | boolean;\n    options?: string[];\n    select_options?: {\n        value: string;\n        label: string;\n    }[];\n    oauth_provider?: string;\n    oauth_scopes?: string[];\n    oauth_integration_id?: string;\n    editable?: string;\n    hidden?: boolean;\n}\nexport interface IntegrationConfigResult {\n    integrationId: string;\n    config: Record<string, unknown>;\n    configSchema: IntegrationConfigSchemaField[];\n}\nexport interface RegistryEntry {\n    id: string;\n    name: string;\n    description: string;\n    versions: string[];\n    latest: string;\n    repository: string;\n    commit: string;\n    icon?: string;\n    author?: {\n        name: string;\n        url?: string;\n    } | string;\n    pricing?: {\n        type: \"free\" | \"paid\" | \"usage\";\n        price?: number;\n        currency?: string;\n        interval?: \"month\" | \"year\";\n        description?: string;\n    };\n    features?: string[];\n    preview_images?: string[];\n    config_schema?: IntegrationConfigSchemaField[];\n    supported_agents?: string[];\n    /** Scopes where this integration can be installed */\n    supported_scopes?: IntegrationScope[];\n    /** Visibility status — controls where integration appears */\n    visibility?: IntegrationVisibility;\n}\n//# sourceMappingURL=integration.d.ts.map","/**\n * Secrets types — shared between services/secrets, @alfe.ai/agent-api-client,\n * the openclaw-secrets plugin, and dashboard clients.\n *\n * Server-side crypto and KMS glue live in @alfe/secret-store (Node/AWS-only);\n * this module is a pure, dependency-free shape contract safe for every\n * environment the agent-api-client ships to.\n */\nimport type { ResourceScope } from \"./access.js\";\n/** Scope levels at which a secret can be owned. Aliased to ResourceScope. */\nexport type SecretScope = ResourceScope;\nexport declare const SECRET_SCOPES: readonly [\"agent\" | \"team\" | \"project\" | \"org\", ...(\"agent\" | \"team\" | \"project\" | \"org\")[]];\n/**\n * v1 encrypted envelope as persisted by services/secrets and exchanged with\n * agents. Values are AES-256-GCM ciphertext; iv/authTag/ciphertext/dataKeyCiphertext\n * are all base64-encoded.\n */\nexport interface EncryptedEnvelopeV1 {\n    version: 1;\n    iv: string;\n    ciphertext: string;\n    authTag: string;\n    dataKeyCiphertext: string;\n}\n/**\n * Display/validation hint for a field's value. `\"json\"` signals that the\n * string is a JSON-stringified payload that consumers should `JSON.parse`.\n */\nexport declare const FIELD_FORMATS: readonly [\"text\", \"email\", \"url\", \"phone\", \"date\", \"number\", \"json\"];\nexport type FieldFormat = (typeof FIELD_FORMATS)[number];\n/**\n * Whether a field is stored in plaintext (visible to anyone with read access)\n * or encrypted (requires KMS + the right encryption context to read).\n */\nexport declare const FIELD_SENSITIVITIES: readonly [\"plaintext\", \"encrypted\"];\nexport type FieldSensitivity = (typeof FIELD_SENSITIVITIES)[number];\n/**\n * A field on a secret. `value` is always a string at the wire; for encrypted\n * fields it's the plaintext at the API edge (the service encrypts before\n * persistence). Reads from the dashboard omit `value` for encrypted fields;\n * agents get a `FieldEnvelope` instead and decrypt locally.\n */\nexport interface Field {\n    key: string;\n    format?: FieldFormat;\n    sensitivity: FieldSensitivity;\n    value: string;\n}\n/**\n * Secret category — drives icon/template/filter behaviour. Defaults to\n * `\"other\"` for migrated rows.\n */\nexport declare const SECRET_CATEGORIES: readonly [\"login\", \"api_key\", \"database\", \"ssh_key\", \"certificate\", \"secure_note\", \"credit_card\", \"identity\", \"wifi\", \"other\"];\nexport type SecretCategory = (typeof SECRET_CATEGORIES)[number];\n/**\n * One field as exposed to readers. Encrypted fields have no `value` on the\n * dashboard read path; the agent-side aggregate carries `envelope` instead.\n */\nexport interface FieldView {\n    key: string;\n    format?: FieldFormat;\n    sensitivity: FieldSensitivity;\n    /** Present for `sensitivity: \"plaintext\"` only. */\n    value?: string;\n    /** Present for `sensitivity: \"encrypted\"` on agent-side reads only. */\n    envelope?: EncryptedEnvelopeV1;\n    /** Plaintext fields that opt into `format: \"json\"` are pre-parsed for callers. */\n    parsedValue?: unknown;\n    rotatedAt?: string;\n    createdAt: string;\n    updatedAt: string;\n}\n/** A secret as assembled from its multi-row aggregate. */\nexport interface SecretAggregate {\n    secretId: string;\n    secretName: string;\n    description?: string;\n    tags: string[];\n    category: SecretCategory;\n    fields: FieldView[];\n    changelogVersion: number;\n    createdAt: string;\n    updatedAt: string;\n}\n/** Metadata-only projection — used by list endpoints. */\nexport interface SecretMetadata {\n    secretId: string;\n    secretName: string;\n    description?: string;\n    tags: string[];\n    category: SecretCategory;\n    fieldKeys: string[];\n    changelogVersion: number;\n    createdAt: string;\n    updatedAt: string;\n}\n/**\n * Per-field encrypted envelope returned to agents on the agent-side aggregate.\n * Agents decrypt locally using a data key fetched from `/decrypt-data-key`.\n */\nexport interface FieldEnvelope {\n    key: string;\n    format?: FieldFormat;\n    envelope: EncryptedEnvelopeV1;\n    rotatedAt?: string;\n    createdAt: string;\n    updatedAt: string;\n}\n/** A scope the caller can read or write secrets in. */\nexport interface ScopeInfo {\n    scope: SecretScope;\n    scopeId: string;\n    name?: string;\n}\n/**\n * KMS-issued data key, returned by the secrets service's\n * `/secrets/generate-data-key` KMS proxy endpoint. The plaintext key is\n * returned base64-encoded; callers MUST decode it to a Buffer and zero the\n * Buffer after use — never keep the plaintext as a JS string.\n */\nexport interface GeneratedDataKey {\n    plaintextKey: string;\n    dataKeyCiphertext: string;\n}\n/**\n * Action types recorded in the secret changelog. Append-only.\n */\nexport declare const CHANGELOG_ACTIONS: readonly [\"created\", \"deleted\", \"metadata_updated\", \"field_added\", \"field_rotated\", \"field_removed\", \"tag_added\", \"tag_removed\"];\nexport type ChangelogAction = (typeof CHANGELOG_ACTIONS)[number];\n/** Who triggered a changelog entry. */\nexport interface ChangelogActor {\n    kind: \"user\" | \"agent\" | \"system\";\n    id: string;\n}\n/**\n * One audit row from the secret's changelog. Metadata only — never carries\n * field VALUES (old or new). Rolling back a rotated secret is intentionally\n * not supported.\n */\nexport interface ChangelogEntry {\n    changelogVersion: number;\n    action: ChangelogAction;\n    fieldKey?: string;\n    fieldSensitivity?: FieldSensitivity;\n    changedBy: ChangelogActor;\n    reason?: string;\n    timestamp: string;\n}\n//# sourceMappingURL=secrets.d.ts.map"],"mappings":";;ACWA;AAMA;AAEA;AAIA;;;;;AAEqBiB,cDDAb,aCQpB,EAAA;EACWa,SAAAA,GAAAA,EAAAA,KAAAA;EAAuB,SAAA,IAAA,EAAA,MAAA;WAAWA,OAAAA,EAAAA,SAAAA;WAAsCA,KAAAA,EAAAA,OAAAA;CAAuB;AAE1FE,KDLLf,aAAAA,GCKuB,CAAA,ODLCA,aCKD,CAAA,CAAA,MAAA,ODL6BA,aCK7B,CAAA;;;;;ADLCA,cC1BfO,qBD0BeP,EAAAA;WAA4BA,MAAAA,EAAAA,QAAAA;EAAa,SAAA,MAAA,EAAA,QAAA;;KCtBjEO,qBAAAA,WAAgCA,oCAAoCA;AAJhF;AAIYA,cAGSE,gBAHY,EAAA;EAAA,SAAA,GAAA,EAAA,KAAA;WAAWF,IAAAA,EAAAA,MAAAA;WAAoCA,OAAAA,EAAAA,SAAAA;EAAqB,SAAA,KAAA,EAAA,OAAA;AAGrG,CAAA;AAMYE,KAAAA,gBAAAA,GAAmBJ,aAAAA;AAMnBM,cAJSA,wBAIe,EAAA;EAAA,SAAA,MAAA,EAAA,QAAA;WAAWA,OAAAA,EAAAA,SAAAA;;AAA+D,KAAlGA,wBAAAA,GAAkG,CAAA,OAA/DA,wBAA+D,CAAA,CAAA,MAAA,OAAxBA,wBAAwB,CAAA;AAUlGE,cARSA,uBAQc,EAAA;EAAA,SAAA,UAAA,EAAA,YAAA;WAAWA,MAAAA,EAAAA,QAAAA;WAAsCA,KAAAA,EAAAA,OAAAA;EAAuB,SAAA,QAAA,EAAA,UAAA;EAE1FE,SAAAA,QAAAA,EAAAA,UAAkB;EAAA,SAAA,OAAA,EAAA,SAAA;;AAKhBJ,KAPPE,uBAAAA,GAOOF,CAAAA,OAP2BE,uBAO3BF,CAAAA,CAAAA,MAAAA,OAPiEE,uBAOjEF,CAAAA;AAGPK,UARKD,kBAAAA,CAQLC;EAAM,KAAA,EAPPP,gBAOO;EASDU,OAAAA,EAAAA,MAAAA;EAkBAC,aAAAA,EAAAA,MAAAA;EAAuB,QAAA,EAAA,MAAA;eAE5BJ,EAhCOL,wBAgCPK;cACMG,EAhCAN,uBAgCAM;EAA4B,OAAA,EAAA,MAAA;EAE7BE,MAAAA,EAhCLL,MAgCKK,CAAAA,MAAa,EAAA,OAAA,CAAA;EAAA,YAAA,EAAA,MAAA;aAsBVF,EAAAA,MAAAA;WAGGV,EAAAA,MAAAA;;;;AC1FXc,UD0CKJ,4BAAAA,CC1CsB;EAOtBM,GAAAA,EAAAA,MAAAA;EAWIC,KAAAA,EAAAA,MAAAA;EACTC,IAAAA,EAAAA,MAAAA;EAKSC,WAAAA,CAAAA,EAAAA,MAAAA;EACTC,QAAAA,CAAAA,EAAAA,OAAAA;EAOKC,OAAAA,CAAK,EAAA,MAAA,GAAA,MAAA,GAAA,OAAA;EAAA,OAAA,CAAA,EAAA,MAAA,EAAA;gBAETH,CAAAA,EAAAA;IACIE,KAAAA,EAAAA,MAAAA;IAAgB,KAAA,EAAA,MAAA;EAOZE,CAAAA,EAAAA;EACTC,cAAAA,CAAAA,EAAc,MAAA;EAKTC,YAAS,CAAA,EAAA,MAAA,EAAA;EAAA,oBAAA,CAAA,EAAA,MAAA;UAEbN,CAAAA,EAAAA,MAAAA;QACIE,CAAAA,EAAAA,OAAAA;;AAIiB,UDKjBT,uBAAAA,CCLiB;EAQjBc,aAAAA,EAAAA,MAAe;EAAA,MAAA,EDDpBlB,MCCoB,CAAA,MAAA,EAAA,OAAA,CAAA;cAKlBgB,EDLIb,4BCKJa,EAAAA;;AACO,UDJJX,aAAAA,CCII;EAMJc,EAAAA,EAAAA,MAAAA;EAeAC,IAAAA,EAAAA,MAAAA;EAAa,WAAA,EAAA,MAAA;UAEjBT,EAAAA,MAAAA,EAAAA;QACCF,EAAAA,MAAAA;EAAmB,UAAA,EAAA,MAAA;EAMhBY,MAAAA,EAAAA,MAAS;EAWTC,IAAAA,CAAAA,EAAAA,MAAAA;EAOIC,MAAAA,CAAAA,EAAAA;IACTC,IAAAA,EAAAA,MAAAA;IAEKC,GAAAA,CAAAA,EAAAA,MAAAA;EASAC,CAAAA,GAAAA,MAAAA;EAAc,OAAA,CAAA,EAAA;IAEnBF,IAAAA,EAAAA,MAAAA,GAAAA,MAAAA,GAAAA,OAAAA;IAEWX,KAAAA,CAAAA,EAAAA,MAAAA;IACRY,QAAAA,CAAAA,EAAAA,MAAAA;IAAc,QAAA,CAAA,EAAA,OAAA,GAAA,MAAA;;;;ECjGZ,cAAA,CAAA,EAAA,MAAoB,EAAA;EAOpB,aAAA,CAAA,EF2CGtB,4BE3CU,EAAA;EAWb,gBAAA,CAAA,EAAA,MAAiB,EAAA;EASjB;EAAY,gBAAA,CAAA,EF0BNV,gBE1BM,EAAA;;YAIpB,CAAA,EFwBQF,qBExBR;;AAGT;;;;AF7EqBA,KCMTgB,WAAAA,GAAcD,aDHzB;;;;;AAID;AAMYb,UCAKgB,mBAAAA,CDAcpB;EAEVM,OAAAA,EAAAA,CAAAA;EAITA,EAAAA,EAAAA,MAAAA;EAAwB,UAAA,EAAA,MAAA;SAAWA,EAAAA,MAAAA;mBAAuCA,EAAAA,MAAAA;;AAEtF;AAQA;;;AAAoFE,cCL/Da,aDK+Db,EAAAA,SAAAA,CAAAA,MAAAA,EAAAA,OAAAA,EAAAA,KAAAA,EAAAA,OAAAA,EAAAA,MAAAA,EAAAA,QAAAA,EAAAA,MAAAA,CAAAA;AAAuB,KCJ/Fc,WAAAA,GDI+F,CAAA,OCJzED,aDIyE,CAAA,CAAA,MAAA,CAAA;AAE3G;;;;AAMkBb,cCPGe,mBDOHf,EAAAA,SAAAA,CAAAA,WAAAA,EAAAA,WAAAA,CAAAA;AAENG,KCRAa,gBAAAA,GDQAb,CAAAA,OCR2BY,mBDQ3BZ,CAAAA,CAAAA,MAAAA,CAAAA;;AASZ;AAkBA;;;;AAG8C,UC/B7Bc,KAAAA,CD+B6B;EAE7BT,GAAAA,EAAAA,MAAAA;EAAa,MAAA,CAAA,EC/BjBM,WD+BiB;aAsBVR,ECpDHU,gBDoDGV;OAGGV,EAAAA,MAAAA;;;;;;AC1FXc,cA0CSQ,iBA1CKT,EAAAA,SAAa,CAAA,OAAA,EAAA,SAAA,EAAA,UAAA,EAAA,SAAA,EAAA,aAAA,EAAA,aAAA,EAAA,aAAA,EAAA,UAAA,EAAA,MAAA,EAAA,OAAA,CAAA;AAOtBG,KAoCLO,cAAAA,GApCwB,CAAA,OAoCCD,iBApCD,CAAA,CAAA,MAAA,CAAA;AAWpC;AACA;AAKA;AACA;AAOiBD,UAgBAG,SAAAA,CAhBK;EAAA,GAAA,EAAA,MAAA;QAETN,CAAAA,EAgBAA,WAhBAA;aACIE,EAgBAA,gBAhBAA;EAAgB;EAOZE,KAAAA,CAAAA,EAAAA,MAAAA;EACTC;EAKKC,QAAAA,CAAAA,EAOFR,mBAPW;EAAA;aAEbE,CAAAA,EAAAA,OAAAA;WACIE,CAAAA,EAAAA,MAAAA;WAIFJ,EAAAA,MAAAA;EAAmB,SAAA,EAAA,MAAA;AAQlC;;AAKcO,UALGE,eAAAA,CAKHF;UACFC,EAAAA,MAAAA;EAAS,UAAA,EAAA,MAAA;EAMJE,WAAAA,CAAAA,EAAAA,MAAc;EAedC,IAAAA,EAAAA,MAAAA,EAAAA;EAAa,QAAA,EAtBhBJ,cAsBgB;QAEjBL,EAvBDM,SAuBCN,EAAAA;kBACCF,EAAAA,MAAAA;EAAmB,SAAA,EAAA,MAAA;EAMhBY,SAAAA,EAAAA,MAAS;AAW1B;AAOA;AACYG,UA3CKL,cAAAA,CA2CU;EAEVM,QAAAA,EAAAA,MAAAA;EASAC,UAAAA,EAAAA,MAAc;EAAA,WAAA,CAAA,EAAA,MAAA;MAEnBF,EAAAA,MAAAA,EAAAA;UAEWX,EArDTG,cAqDSH;WACRY,EAAAA,MAAAA,EAAAA;EAAc,gBAAA,EAAA,MAAA;;;;ACjG7B;AAOA;AAWA;AASA;AAA6B,UD0BZL,aAAAA,CC1BY;KAIL,EAAA,MAAA;QAAf,CAAA,EDwBIT,WCxBJ;EAAM,QAAA,EDyBDF,mBCzBC;EAGE,SAAA,CAAA,EAAA,MAAA;EAMA,SAAA,EAAA,MAAA;EAQA,SAAA,EAAA,MAAA;AAQjB;AASA;AAQiB,UDXAY,SAAAA,CCWa;EASb,KAAA,EDnBNd,WCmBM;EAQA,OAAA,EAAA,MAAA;EAMA,IAAA,CAAA,EAAA,MAAA;AAejB;;;;;;;AA8CsB,UDpFLe,gBAAAA,CCoFK;cAAhB,EAAA,MAAA;mBAYQ,EAAA,MAAA;;;;;AAgBU,cDzGHC,iBCyGG,EAAA,SAAA,CAAA,SAAA,EAAA,SAAA,EAAA,kBAAA,EAAA,aAAA,EAAA,eAAA,EAAA,eAAA,EAAA,WAAA,EAAA,aAAA,CAAA;AAI4C,KD5GxDC,eAAAA,GC4GwD,CAAA,OD5G9BD,iBC4G8B,CAAA,CAAA,MAAA,CAAA;;AAOpB,UDjH/BE,cAAAA,CCiH+B;MAApB,EAAA,MAAA,GAAA,OAAA,GAAA,QAAA;MAIuB,MAAA;;;;;;;AAkCvB,UD9IXC,cAAAA,CC8IW;kBAIiC,EAAA,MAAA;QAAR,EDhJzCF,eCgJyC;UAQzC,CAAA,EAAA,MAAA;kBACP,CAAA,EDvJkBX,gBCuJlB;WAYsC,EDlK5BY,cCkK4B;QAC9B,CAAA,EAAA,MAAA;WAAR,EAAA,MAAA;;;;;UApQY,oBAAA;EF3CIlC,MAAAA,EAAAA,MAAAA;EAITA,MAAAA,EAAAA,MAAAA;;AAAgCA,UE8C3B,aAAA,CF9C2BA;SAAoCA,EAAAA,MAAAA;EAAqB,QAAA,EAAA,MAAA;EAGhFE,WAAAA,EAAAA,MAKpB;EACWA,QAAAA,EAAAA,MAAAA;EAESE,MAAAA,EAAAA,OAAAA,GAAAA,SAGpB,GAAA,QAAA;EACWA,SAAAA,CAAAA,EAAAA,MAAAA;EAAwB,SAAA,CAAA,EAAA,MAAA;UAAWA,CAAAA,EAAAA,MAAAA;;AAA+D,UE0C7F,iBAAA,CF1C6F;EAEzFE,IAAAA,EAAAA,MAAAA;EAQTA,IAAAA,EAAAA,MAAAA;EAAuB,QAAA,EAAA,MAAA;MAAWA,CAAAA,EAAAA,MAAAA;cAAsCA,CAAAA,EAAAA,MAAAA;EAAuB,UAAA,CAAA,EAAA,OAAA;AAE3G;AAAmC,UEuClB,YAAA,CFvCkB;SACxBJ,EAAAA,CAAAA;SAIQE,EAAAA,MAAAA;UACDE,EAAAA,MAAAA;OAENG,EEmCH,MFnCGA,CAAAA,MAAAA,EEmCY,iBFnCZA,CAAAA;;AASKG,UE6BA,gBAAA,CF7BAA;EAkBAC,IAAAA,EAAAA,MAAAA;EAAuB,GAAA,EAAA,MAAA;WAE5BJ,EAAAA,MAAAA;;AACkC,UEc7B,mBAAA,CFd6B;EAE7BK,QAAAA,EAAAA,MAAa;EAAA,IAAA,EAAA,MAAA;MAsBVF,EAAAA,MAAAA;cAGGV,EAAAA,UAAAA,GAAAA,YAAAA;UAENF,EAAAA,MAAAA;;UEPA,mBAAA;;;EDrFLgB,GAAAA,EAAAA,MAAAA;EAOKE,YAAAA,CAAAA,EAAAA,MAAAA;EAWIC,UAAAA,CAAAA,EAAAA,OAAmF;AACxG;AAKqBE,UCqEJ,qBAAA,CDrE4D;EACjEC,OAAAA,EAAAA,MAAAA;EAOKC,IAAAA,EAAAA,MAAK,GAAA,QAAA,GAAA,QAAA;EAAA,SAAA,EAAA,MAAA;WAETH,EAAAA,MAAAA;OACIE,EC+DR,mBD/DQA,EAAAA;EAAgB,SAAA,EAAA,MAAA;AAOjC;AACYG,UC2DK,cAAA,CD3DoBD;EAKpBE,OAAAA,EAAAA,MAAS;EAAA,aAAA,EAAA,MAAA;cAEbN,EAAAA,MAAAA;WACIE,EAAAA,MAAAA;YAIFJ,EAAAA,MAAAA,GAAAA,IAAAA;;AAQES,UC+CA,aAAA,CD/Ce;EAAA,QAAA,EAAA,MAAA;MAKlBF,EAAAA,MAAAA;UACFC,EAAAA,MAAAA;EAAS,WAAA,EAAA,MAAA;EAMJE,YAAAA,CAAAA,EAAAA,MAAc;EAedC,UAAAA,CAAAA,EAAAA,OAAa;;AAEjBT,UC2BI,gBAAA,CD3BJA;WACCF,EAAAA,MAAAA;EAAmB,IAAA,EAAA,MAAA;EAMhBY,YAAS,EAAA,MAAA;EAWTC,YAAAA,CAAAA,EAAAA,MAAgB;EAOZC,UAAAA,EAAAA,OAAAA;AACrB;AAEiBE,UCOA,kBAAA,CDPc;EASdC,SAAAA,EAAAA,MAAc;EAAA,OAAA,EAAA,MAAA;YAEnBF,EAAAA,OAAAA;;AAGGC,UCDE,eAAA,CDCFA;EAAc,QAAA,EAAA,MAAA;;;;ACjG7B;AAOiB,cAwGJ,cAAA,CAxGiB;EAWb,iBAAA,MAAiB;EASjB,iBAAY,MAAA;EAAA,WAAA,CAAA,MAAA,EAwFP,oBAxFO;UAIL,OAAA;cAAf,CAAA,IAGQ,CAHR,EAAA;IAAM,WAAA,CAAA,EAAA,MAAA;EAGE,CAAA,CAAA,EA8GsC,OA9GtC,CAAA;IAMA,KAAA,EAwGuD,aAxGpC;EAQnB,CAAA,CAAA;EAQA,eAAA,CAAA,CAAA,EA+FU,OA/FW,CA+FH,YA1F1B,CAAA;EAIQ,WAAA,CAAA,IAAA,EAAc;IAQd,KAAA,EAAA;MASA,IAAA,EAAA,MAAgB;MAQhB,SAAA,EAAA,KAAkB,GAAA,KAAA;MAMlB,WAAe,CAAA,EAAA,MAAA;IAenB,CAAA,EAAA;EAAc,CAAA,CAAA,EA8CrB,OA9CqB,CAAA;IAIL,IAAA,EA0CA,gBA1CA,EAAA;;mBA6BiC,CAAA,IAAA,EAAA;IAOpB,QAAA,EAAA,MAAA;IAAR,IAAA,EAAA,MAAA;IAML,IAAA,EAAA,MAAA;IAAhB,YAAA,CAAA,EAAA,UAAA,GAAA,YAAA;MAYA,OAAQ,CAAA,mBAAA,CAAA;iBAAR,CAAA,IAAA,EAAA;IASQ,IAAA,EAAA,MAAA,GAAA,QAAA,GAAA,QAAA;MAAR,OAAA,CAAQ,qBAAR,CAAA;cAO0B,CAAA,CAAA,EAAR,OAAQ,CAAA,cAAA,CAAA;eAAR,CAAA,KAAA,EAAA;IAI4C,MAAA,CAAA,EAAA,MAAA;MAAjB,OAAA,CAAA;IAOH,KAAA,EAPoB,aAOpB,EAAA;;kBAIG,CAAA,CAAA,EAJvB,OAIuB,CAAA;IAAR,QAAA,EAJK,gBAIL,EAAA;;gBAkBpB,CAAA,SAAA,EAAA,MAAA,CAAA,EAlBoB,OAkBpB,CAlB4B,kBAkB5B,CAAA;gBAAjB,CAAA,QAAA,EAAA,MAAA,CAAA,EAdoC,OAcpC,CAAA;IAUA,OAAA,EAAA,OAAA;;iBAMsB,CAAA,IAAA,EAAA;IAIiC,KAAA,EAAA,KAAA,GAAA,MAAA,GAAA,SAAA;IAAR,OAAA,EAAA,MAAA;MApB/C,OA4BM,CAAA;IACP,KAAA,EA7BkB,eA6BlB,EAAA;IAYsC,UAAA,EAAA,MAAA,GAAA,IAAA;;mBACtC,CAAA,IAAA,EAAA;IAWqD,KAAA,EAAA,KAAA,GAAA,MAAA,GAAA,SAAA;IAAR,OAAA,EAAA,MAAA;IAU7C,QAAA,EAAA,MAAA;MArDC,OA6DwD,CAAA;IAAzD,WAAA,EAAA,MAAA;IAM0C,SAAA,EAAA,MAAA;;kBAIf,CAAA,CAAA,EAjEJ,OAiEI,CAjEI,kBAiEJ,EAAA,CAAA;sBAoBgB,CAAA,aAAA,EAAA,MAAA,CAAA,EAjFK,OAiFL,CAjFa,uBAiFb,CAAA;yBAQA,CAAA,aAAA,EAAA,MAAA,EAAA,MAAA,EAjFpC,MAiFoC,CAAA,MAAA,EAAA,OAAA,CAAA,CAAA,EAhF3C,OAgF2C,CAAA,IAAA,CAAA;oBAQZ,CAAA,aAAA,EAAA,MAAA,EAAA,QAAA,EAAA;IAUJ,OAAA,CAAA,EAAA,MAAA;IAOF,MAAA,CAAA,EA7Fa,MA6Fb,CAAA,MAAA,EAAA,OAAA,CAAA;MA5FzB,OAoGuB,CApGf,kBAoGe,CAAA;mBAOI,CAAA,aAAA,EAAA,MAAA,CAAA,EAhGkB,OAgGlB,CAhG0B,kBAgG1B,CAAA;aAQG,CAAA,QAAA,EAAA,MAAA,EAAA,MAAA,CAAA,EAAA,MAAA,EAAA,CAAA,EA9F9B,OA8F8B,CAAA;IAeF,GAAA,EAAA,MAAA;IAOH,QAAA,EAAA,MAAA;IASF,SAAA,EAAA,MAAA;;gBAuBT,CAAA,QAAA,EAAA,MAAA,CAAA,EA5Id,OA4Ic,CAAA;IACb,QAAA,EAAA,MAAA;IAOuB,SAAA,EAAA,OAAA;IAM8D,MAAA,CAAA,EA1J7B,MA0J6B,CAAA,MAAA,EAAA,MAAA,CAAA;;aAgDhF,CAAA,CAAA,EApMY,OAoMZ,CAAA;IAIG,YAAA,EAxMiC,aAwMjC,EAAA;;sBAcH,CAAA,CAAA,EAlNqB,OAkNrB,CAAA;IAKL,QAAA,CAAA,EAAA;MAcK,KAAA,EAAA,MAAA;MAII,YAAA,EAAA,MAAA;MAKA,QAAA,EAAA,MAAA;MACI,YAAA,EAAA,MAAA;MAEF,eAAA,CAAA,EAAA,MAAA,EAAA;MAGH,SAAA,EAAA,OAAA;MAAR,WAAA,CAAA,EAAA,MAAA;IAaK,CAAA,EAAA;IAGgB,KAAA,EAAA,MAAA;IAA4B,YAAA,EAAA,MAAA;IAAjD,QAAA,EAAA,MAAA;IAQK,YAAA,EAAA,MAAA;IAMM,SAAA,EAAA,MAAA;IACJ,eAAA,CAAA,EAAA,MAAA,EAAA;;yBAHP,CAAA,KAAA,EAAA,MAAA,CAAA,EA5P0C,OA4P1C,CAAA;IAiBK,QAAA,EAAA;MAIM,KAAA,EAAA,MAAA;MACJ,WAAA,CAAA,EAAA,MAAA;MAEE,SAAA,EAAA,OAAA;IAET,CAAA,EAAA;;yBAcA,CAAA,KAAA,EAAA,MAAA,CAAA,EA5R0C,OA4R1C,CAAA;IASK,QAAA,EAAA;MAMI,KAAA,EAAA,MAAA;MAED,WAAA,CAAA,EAAA,MAAA;MAAR,SAAA,EAAA,OAAA;IAUK,CAAA,EAAA;;0BAKG,CAAA,CAAA,EApTsB,OAoTtB,CAAA;IAAR,KAAA,EAAA,MAAA;IAcK,YAAA,EAAA,MAAA;IAKc,QAAA,EAAA,MAAA;IAAnB,YAAA,EAAA,MAAA;IAYK,WAAA,CAAA,EAAA,MAAA;;sBAWyB,CAAA,CAAA,EApVJ,OAoVI,CAAA;IAAR,KAAA,EAAA,MAAA;IAmBV,WAAA,EAAA,MAAA;;oBA+BZ,CAAA,CAAA,EA/XwB,OA+XxB,CAAA;IAS0C,WAAA,EAAA,MAAA;IAS1C,oBAAA,EAAA,MAAA;IASA,YAAA,EAAA,MAAA;;kBAsBA,CAAA,CAAA,EAxasB,OAwatB,CAAA;IASA,WAAA,EAAA,MAAA;IAUA,SAAA,EAAA,MAAA;;sBAmCA,CAAA,CAAA,EAvd0B,OAud1B,CAAA;IA2BD,WAAA,EAAA,MAAA;IAeC,WAAA,EAAA,MAAA;IAqBA,aAAA,EAAA,MAAA;;yBA4CA,CAAA,CAAA,EA1jB6B,OA0jB7B,CAAA;IAYwD,WAAA,EAAA,MAAA;IAWjB,YAAA,EAAA,MAAA;IAOnB,oBAAA,EAAA,MAAA;IAOc,OAAA,EAAA,MAAA;IAMjB,QAAA,EAAA,MAAA;IAcjB,OAAA,EAAA,MAAA;IAiB2B,KAAA,EAAA,MAAA;IAII,eAAA,EAAA,MAAA,EAAA;IAY/B,QAAA,EAAA,MAAA;IAUA,YAAA,EAAA,MAAA;;uBAoBiC,CAAA,CAAA,EAnqBN,OAmqBM,CAAA;IAcjC,WAAA,EAAA,MAAA;IAAO,SAAA,EAAA,MAAA;;wBA1qBiB;;;;;;sBASF;;;;yBAOG;;;;;;;;;;;;;mBAgBZ;MACb;;;;uBAOuB;;;;;;;;;;;QAM8D;;;;;;;;;;;;;MAarF;;;;;;;;;;;;WAmCK;;;;MAIL,QAAQ;;;;;;;;WAcH;;;;;MAKL;;;;;;;;;;WAcK;;;;eAII;;;;;eAKA;mBACI;;iBAEF;;;MAGX,QAAQ;;;WAaH;;;MAGL;eAAqB;eAA4B;;;;WAQ5C;;;;MAIL;;iBAEW;aACJ;;eAEE;;;;;;;WAYJ;;;;iBAIM;aACJ;;eAEE;;MAET;;;;;;WAUK;;;;MAIL;;;WASK;;;;;;eAMI;;MAET,QAAQ;;;WAUH;;eAEI;;;MAGT,QAAQ;;;WAcH;;;;;MAKL;aAAmB;;;;;WAYd;;;MAGL;;sBAQsB,QAAQ;;;;;;;;;;YAmBlB;;;;;;;;;MASZ;;;;;;;;;;;;;;;;MAsBA;;;0CAS0C;;;;;;;;;;MAS1C;;;;;;;;;;MASA;;;;;;;;;;;;MAWA;;;;;;;;;;;MAWA;;;;;MASA;;;;;;;;;;MAUA;;;;;;;;;;;;;;;;;;MAkBA;;;;;;;;;;;;;;;;MAiBA;;;;;;;;;;;;;;;;;;MA2BD;;;;;;;;;;;MAeC;;;;;;;;;;MAqBA;;;;;;;;;;;;;;;;;;;;;;;;MAsBA;;;;;;;;;;;;MAsBA;;;;wDAYwD;;;;uCAWjB;;;;;;;;;;;oBAOnB;;;;;;;;kCAOc;;;iBAMjB;;;;;;;;;;;;;;;MAcjB;;;;;;2BAiB2B;;;;+BAII;;;;;;;;;;MAY/B;;;;MAUA;;;;;MAWA;iCASiC;;;;;;;;;;;MAcjC"}
+{"version":3,"file":"index.d.cts","names":[],"sources":["../src/index.ts"],"mappings":";;;;AA8ES,UA/BQ,oBAAA,CA+BR;EAAM,MAAA,EAAA,MAAA;EAGE,MAAA,EAAA,MAAA;AAMjB;AAQiB,UAzCA,aAAA,CAyCmB;EAQnB,OAAA,EAAA,MAAA;EASA,QAAA,EAAA,MAAA;EAQA,WAAA,EAAA,MAAa;EASb,QAAA,EAAA,MAAA;EAQA,MAAA,EAAA,OAAA,GAAA,SAAkB,GAAA,QAAA;EAMlB,SAAA,CAAA,EAAA,MAAe;EAenB,SAAA,CAAA,EAAA,MAAc;EAAA,QAAA,CAAA,EAAA,MAAA;;AAiC6C,UA9HvD,iBAAA,CA8HuD;MAAjB,EAAA,MAAA;MAOpB,EAAA,MAAA;UAAR,EAAA,MAAA;MAML,CAAA,EAAA,MAAA;cAAhB,CAAA,EAAA,MAAA;YAYQ,CAAA,EAAA,OAAA;;AASA,UAvJG,YAAA,CAuJH;SAAR,EAAA,CAAA;SAO0B,EAAA,MAAA;UAAR,EAAA,MAAA;OAI4C,EA9J3D,MA8J2D,CAAA,MAAA,EA9J5C,iBA8J4C,CAAA;;AAOpB,UAlK/B,gBAAA,CAkK+B;MAApB,EAAA,MAAA;KAIuB,EAAA,MAAA;WAAR,EAAA,MAAA;;AAkBpB,UAlLN,mBAAA,CAkLM;UAAjB,EAAA,MAAA;MAUA,EAAA,MAAA;MAM8B,EAAA,MAAA;cAAR,EAAA,UAAA,GAAA,YAAA;UAIiC,EAAA,MAAA;;AAQjD,UAtMK,mBAAA,CAsML;MACP,EAAA,MAAA;MAYsC,EAAA,MAAA;KAC9B,EAAA,MAAA;cAAR,CAAA,EAAA,MAAA;YAWqD,CAAA,EAAA,OAAA;;AAUrD,UAjOY,qBAAA,CAiOZ;SAQyD,EAAA,MAAA;MAAzD,EAAA,MAAA,GAAA,QAAA,GAAA,QAAA;WAM0C,EAAA,MAAA;WAAxB,EAAA,MAAA;OAcS,EAxPvB,mBAwPuB,EAAA;WAoCgB,EAAA,MAAA;;AA2BhB,UAnTf,cAAA,CAmTe;SAgBF,EAAA,MAAA;eAkBF,EAAA,MAAA;cAOI,EAAA,MAAA;WAmBG,EAAA,MAAA;YAoCF,EAAA,MAAA,GAAA,IAAA;;AA6BL,UAxaX,aAAA,CAwaW;UAOG,EAAA,MAAA;MAgBZ,EAAA,MAAA;UACb,EAAA,MAAA;aAOuB,EAAA,MAAA;cAM8D,CAAA,EAAA,MAAA;YAarF,CAAA,EAAA,OAAA;;AAuCQ,UAxfG,gBAAA,CAwfH;WAAR,EAAA,MAAA;MAcK,EAAA,MAAA;cAKL,EAAA,MAAA;cAcK,CAAA,EAAA,MAAA;YAII,EAAA,OAAA;;AAMI,UA3hBF,kBAAA,CA2hBE;WAEF,EAAA,MAAA;SAGH,EAAA,MAAA;YAAR,EAAA,OAAA;;AAgBqB,UA1iBV,eAAA,CA0iBU;UAA4B,EAAA,MAAA;UAAjD,EAAA,MAAA;MAQK,EAAA,MAAA;aAMM,CAAA,EAAA,MAAA;;AAGF,cA5iBF,cAAA,CA4iBE;mBALT,MAAA;mBAiBK,MAAA;aAIM,CAAA,MAAA,EAxjBK,oBAwjBL;UACJ,OAAA;cAEE,CAAA,KAAA,EAAA;IAET,WAAA,CAAA,EAAA,MAAA;MAhiBiD,OA0iB5C,CAAA;IAIL,KAAA,EA9iBkE,aA8iBlE;;iBAeS,CAAA,CAAA,EAtjBY,OAsjBZ,CAtjBoB,YAsjBpB,CAAA;aAED,CAAA,IAAA,EAAA;IAAR,KAAA,EAAA;MAUK,IAAA,EAAA,MAAA;MAEI,SAAA,EAAA,KAAA,GAAA,KAAA;MAGD,WAAA,CAAA,EAAA,MAAA;IAAR,CAAA,EAAA;MAjkBA,OA+kBK,CAAA;IAKc,IAAA,EAplBH,gBAolBG,EAAA;;mBAYd,CAAA,IAAA,EAAA;IAGL,QAAA,EAAA,MAAA;IAQ8B,IAAA,EAAA,MAAA;IAAR,IAAA,EAAA,MAAA;IAmBV,YAAA,CAAA,EAAA,UAAA,GAAA,YAAA;MAlnBZ,OA2nBA,CA3nBQ,mBA2nBR,CAAA;iBAsBA,CAAA,IAAA,EAAA;IAS0C,IAAA,EAAA,MAAA,GAAA,QAAA,GAAA,QAAA;MAjpB1C,OA0pBA,CA1pBQ,qBA0pBR,CAAA;cASA,CAAA,CAAA,EA5pBkB,OA4pBlB,CA5pB0B,cA4pB1B,CAAA;eAWA,CAAA,KAAA,EAAA;IAWA,MAAA,CAAA,EAAA,MAAA;MA9qB6C,OAurB7C,CAAA;IAUA,KAAA,EAjsB8D,aAisB9D,EAAA;;kBAmCA,CAAA,CAAA,EA7tBsB,OA6tBtB,CAAA;IA2BD,QAAA,EAxvB2C,gBAwvB3C,EAAA;;gBAoCC,CAAA,SAAA,EAAA,MAAA,CAAA,EAxxBqC,OAwxBrC,CAxxB6C,kBAwxB7C,CAAA;gBAsBA,CAAA,QAAA,EAAA,MAAA,CAAA,EA1yBoC,OA0yBpC,CAAA;IAsBA,OAAA,EAAA,OAAA;;iBAuBuC,CAAA,IAAA,EAAA;IAOnB,KAAA,EAAA,KAAA,GAAA,MAAA,GAAA,SAAA;IAOc,OAAA,EAAA,MAAA;MAv1BlC,OA61BiB,CAAA;IAcjB,KAAA,EA32BiB,eA22BjB,EAAA;IAiB2B,UAAA,EAAA,MAAA,GAAA,IAAA;;mBAgB3B,CAAA,IAAA,EAAA;IAUA,KAAA,EAAA,KAAA,GAAA,MAAA,GAAA,SAAA;IAWA,OAAA,EAAA,MAAA;IASiC,QAAA,EAAA,MAAA;MAh6BjC,OA86BA,CAAA;IAAO,WAAA,EAAA,MAAA;;;sBAx6Be,QAAQ;+CAIiB,QAAQ;yDAQjD,0BACP;;;aAYsC;MACtC,QAAQ;4CAWqC,QAAQ;oDAUrD;;;;;oCAQA;;;aAAyD;;iBAMvC;kBAAwB;;;;;;;;;;;;0BAcf;;;;;;;;;;0CAoCgB;;;;;;;8BAiBZ;;;;;;;0BAUJ;;;;wBAgBF;;;;;sBAkBF;;;;0BAOI;;;;;6BAmBG;;;;;;;;;;;;2BAoCF;;;;wBAOH;;;;;;sBAsBF;;;;yBAOG;;;;;;;;;;;;;mBAgBZ;MACb;;;;uBAOuB;;;;;;;;;;;QAM8D;;;;;;;;;;;;;MAarF;;;;;;;;;;;;WAmCK;;;;MAIL,QAAQ;;;;;;;;WAcH;;;;;MAKL;;;;;;;;;;WAcK;;;;eAII;;;;;eAKA;mBACI;;iBAEF;;;MAGX,QAAQ;;;WAaH;;;MAGL;eAAqB;eAA4B;;;;WAQ5C;;;;MAIL;;iBAEW;aACJ;;eAEE;;;;;;;WAYJ;;;;iBAIM;aACJ;;eAEE;;MAET;;;;;;WAUK;;;;MAIL;;;WASK;;;;;;eAMI;;MAET,QAAQ;;;WAUH;;eAEI;;;MAGT,QAAQ;;;WAcH;;;;;MAKL;aAAmB;;;;;WAYd;;;MAGL;;sBAQsB,QAAQ;;;;;;;;;;YAmBlB;;;;;;;;;MASZ;;;;;;;;;;;;;;;;MAsBA;;;0CAS0C;;;;;;;;;;MAS1C;;;;;;;;;;MASA;;;;;;;;;;;;MAWA;;;;;;;;;;;MAWA;;;;;MASA;;;;;;;;;;MAUA;;;;;;;;;;;;;;;;;;MAkBA;;;;;;;;;;;;;;;;MAiBA;;;;;;;;;;;;;;;;;;MA2BD;;;;;;;;;;;MAeC;;;;;;;;;;MAqBA;;;;;;;;;;;;;;;;;;;;;;;;MAsBA;;;;;;;;;;;;MAsBA;;;;wDAYwD;;;;uCAWjB;;;;;;;;;;;oBAOnB;;;;;;;;kCAOc;;;iBAMjB;;;;;;;;;;;;;;;MAcjB;;;;;;2BAiB2B;;;;+BAII;;;;;;;;;;MAY/B;;;;MAUA;;;;;MAWA;iCASiC;;;;;;;;;;;MAcjC"}